Docker Container Automation Tool Tugtainer Vulnerability

CVE-2025-69201

What is CVE-2025-69201?

Tugtainer, a self-hosted application for automating Docker container updates, is vulnerable due to arbitrary arguments being injectable in the tugtainer-agent POST api/command/run endpoint. This flaw could allow an attacker to manipulate command execution, potentially leading to unauthorized actions on the containerized environment. Users are strongly encouraged to upgrade to version 1.15.1, which addresses and mitigates this security issue. For further details and implementation of fixes, refer to the official release notes and security advisories.

References